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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously nnailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1 .31 3 and MPEP 1 308. 

1. H This communication Is responsive to an amendment filed on 08/04/2005 . 

2. Kl The allowed clalm(s) Is/are t 7-9, 15-17 and 23-24 . 

3. □ Acknowledgment Is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

a)n All b)nSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received; . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result In ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as 'replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mall Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mall Date . 

Identifying Indicia such as the appncation number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such In the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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1. □ Notice of References Cited (PTO-892) 5. □ Notice of Informal Patent Application (PTO-152) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 6. □ Interview Summary (PTO-413), 

Paper No. /Mail Date . 

3. □ Information Disclosure Statements (PTO-1449 or PTO/SB/08), 7. ^ Examiner's Amendment/Comment 

Paper No./Mall Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 8. □ Examiner's Statement of Reasons for Allowance 

of Biological Material 

9. □ Other . 
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DETAILED ACTION 
EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1,312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Kevin J. Zilka Registration No. 41,429 on September 1, 2005. 

The application has been amended as follows: 
In the claims: 

9. (Currently Amended) A tangible computer-readable storage medium storing 
instructions that when executed by a computer causes the computer to perform a method for 
establishing a list of security scanner attributes for a computing node within a hierarchy of 
computing nodes, the list of security scanner attributes being associated with a security scanner 
action to be performed by a security scanner program, the method comprising: 

establishing a hierarchy of lists of attributes, an attribute being comprised of an attribute 
identifier and an attribute value, the attribute value being comprised of a list of attributes used by 
the security scanner program-to control an operation of the security scanner program, the list of 
attributes being comprised of a grouping attribute and a series of one or more attributes; 

examining the grouping attribute associated with the list of attributes; 

updating an element of the list of attributes if the grouping attribute indicates that the 
element may be updated without also updating other elements in the list of attributes; 
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updating the element and all other elements of the list of attributes if the grouping 
attribute indicates that updating the element requires all other elements to be updated; and 

updating the element, all other elements, and all subordinate elements of the list of 
attributes if the grouping attribute indicates that updating the element requires all subordinate 
elements of the list of attributes to be updated; 

wherein the grouping attribute is associated with the entire list of attributes for controlling 
the updating through selection of at least one of at least three scenarios by indicating at least 
one of: 

the element may be updated without also updating other elements in the list of 
attributes, 

updating the element requires all other elements in the list of attributes to be 
updated, and 

updating the element requires all other elements in the list of attributes and all 
subordinate elements in the list of attributes to be updated; 

wherein updating the element involves overwriting the value with another value that may 
be identical to an original value; 

wherein updating the element and all other elements of the list of attributes involves 
overwriting each value with another value that may be identical to an original value; 

wherein updating the element, all other elements in the list of attributes, and all 
subordinate elements of the list of attributes involves overwriting each value with another value 
that may be identical to an original value for each element and each subordinate element of the 
list of attributes; 

wherein the attribute value includes a second list of attributes used by the security 
scanner program to control the operation of the security scanner program; 
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wherein the second list of attributes includes a second grouping attribute associated with 
each of the attributes of the second list; 

wherein the element of the list of attributes contains an identifier that uniquely identifies 
the element and a value, wherein the value may itself be a list of elements; 

wherein the list of security scanner attributes determines the files to be scanned by the 
security scanner program; 

wherein the list of security scanner attributes further determines a corrective action to / 
take in response to the identification of an infected file. 



Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Beemnet W. Dada whose telephone number is (571) 272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). ^ 
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